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610 



User connects to a port and obtains a temporary layer-3 
address from an address server accessible to the packet 
forwarding device 



620 



User initiates a request for a web page 



630 



User is directed to a network login page 
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FIG. 6 
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710 



User accesses the network login controller user interface and 
enters a user identification data 



720 



Network login controller sends a user authentication request 
to the authentication server using the user identification 
data supplied by the user 
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Not Authentic 



Authentication server determines whether 
the user identification data is authentic 



750 



Authentication 
Server responds 
with user 
authentication 
reply denying 
permission to 
access the 
network 



Authentic 



Authentication server responds with 
user authentication reply granting 
permission to access the network 
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Denied 



820 




Network login 
controller leaves 
port in an 
unauthorized/ 
non-forwarding 
state 
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Network login controller unblocks the port 
by placing the port into an 
authorized/forwarding state 



840 



Network login controller assigns the port to a 
permanent VLAN and the port obtains a 
permanent layer-3 address 
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Packet forwarder commences sending and 
receiving packets for the authorized port 
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User logs out using the network login controller; Link 

from user to the port is lost; No port activity for a 
period of time; Network administrator places port into 
an unauthorized state 
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Network login controller blocks the port by 
returning the port to an unauthorized/ 
non-forwarding state 
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